A digital key issuance and verification method and system

Abstract

The present invention discloses a method and system for issuing and verifying digital keys. In the digital key issuing method, a digital key issuing agency first issues a master key certificate to a main user device, and then uses the master key certificate to digitally sign the temporary digital car key of the target device user, that is, the specific information in the secondary key certificate issuance request, to obtain the proprietary identifier of the master key certificate, and the digital key issuing agency includes the proprietary identifier of the master key certificate in the secondary key certificate. When the target device verifies the secondary key certificate, the proprietary identifier of the master key certificate in the secondary key certificate is extracted, and the validity of the proprietary identifier is verified by signature verification and other methods, thereby verifying the validity of the secondary key certificate. The present invention can simplify the complexity of digital key management, reduce the operating and maintenance costs of digital keys, and can also use the secondary key certificate safely, compliantly, conveniently and reliably offline.

Description

Technical Field

[0001] The present invention belongs to a physical lock login technology using wireless communication, and more particularly to a digital key issuance and verification method and system. Background Art

[0002] As one of the important innovative functions of smart connected cars, digital car keys (or "car digital keys") integrate car key functions into mobile terminal devices. Based on security technologies such as SE and TEE, through near-field communication, Bluetooth, cellular communication, ultra-wideband and other communication technologies, symmetric key and asymmetric key technologies are used to authenticate vehicle users to complete functions such as opening and starting the vehicle. With digital car keys, vehicle users can use smartphones, remote control keys and other mobile devices to safely communicate, store, verify and share digital keys with vehicles. Among them, PKI digital certificate technology greatly enhances the security of digital car key solutions.

[0003] like Figure 1 As shown, when the vehicle owner (the owner of the motor vehicle, i.e. the car owner) is an individual, he can control the vehicle through the interaction between the "vehicle APP" and the "digital car key APP" on the "car owner's mobile terminal device", and then obtain the digital car key through the "car manufacturer's digital car key platform"; the car owner can also share his digital car key with the driver or other service personnel through the interaction between the "vehicle APP" and the "digital car key APP", and then through the "car manufacturer's digital car key platform", and the latter can obtain control of the vehicle through the digital car key shared by the car owner.

[0004] Similarly, when the vehicle owner is an organization (unit user or transportation company), the vehicle operator can connect to the "Car Enterprise Digital Car Key Platform" through its vehicle operation management platform and share its digital car key with the driver or other service personnel, thereby carrying out business activities such as vehicle leasing, fleet management, vehicle rescue, and vehicle maintenance.

[0005] The digital car key system implemented using the traditional PKI digital certificate authentication mechanism requires some complex measures to ensure the convenience and security of the digital car key in use. At the same time, the traditional method also has the following disadvantages:

[0006] When transferring vehicle ownership, the system needs to ensure that the authorization information of the digital car key shared by the original owner is completely cleared to prevent the occurrence of vehicle control incidents that are not authorized by the new owner;

[0007] The digital car key shared to represent the transfer of vehicle use rights does not carry the verifiable authorization information of the car owner. It is necessary to use the data chain in the cross-enterprise digital car key platform of the car enterprise and the vehicle operation management platform of the user unit or transportation unit to form a reliable electronic authorization evidence chain;

[0008] In order to ensure the safety and effectiveness of using digital car keys, vehicles often need to verify the authenticity and effectiveness of digital car keys on mobile terminal devices held by drivers or other service personnel online. When the vehicle is in special environments such as underground parking lots and outdoors, where there is a lack of Internet access or poor Internet access, it is difficult to verify the validity of digital car keys online. Summary of the invention

[0009] In response to the above technical problems, the purpose of the present invention is to provide a digital key issuance and verification method and system to solve the problem of offline use of secondary keys for vehicles or other devices in the absence of networking conditions or in poor networking conditions, and to simplify the process of ensuring the non-repudiation of temporary transfer of the right to use the target device.

[0010] To achieve the above-mentioned purpose, the technical solution adopted by the present invention is: a method for issuing and verifying a digital key, which uses the digital key of the main user device as the main key to create one or more temporary digital keys, namely, secondary keys.

[0011] A first aspect of the present invention provides a method for issuing a digital key, comprising the following steps:

[0012] The digital key issuing agency of the terminal system issues a master key certificate to the master user device.

[0013] When the primary user device receives the secondary key issuance application, it submits the information including the primary user's digital signature and the primary key certificate to the digital key platform of the terminal system.

[0014] The digital key platform constructs secondary key certificate issuance application information based on secondary key issuance application, primary user digital signature, primary key certificate and other information, and applies to the digital key issuing agency for issuance of secondary key certificate.

[0015] The digital key issuing agency verifies the secondary key certificate issuance application information at the digital key issuing agency, and requests the chain certificate management system of the terminal system to produce a chain certificate including the primary user's digital signature information.

[0016] The digital key issuing agency confirms whether the format of the chain certificate returned by the chain certificate management system is compliant, signs the compliant chain certificate, and returns it to the digital key platform as a secondary key certificate.

[0017] The secondary user device can be used after obtaining the secondary key certificate.

[0018] Furthermore, the primary user device transmits a key application entry link to the secondary user device, wherein the key application entry link includes primary key association information of the primary user device.

[0019] The secondary key issuance application including the declaration information provided to the secondary user device is submitted to the digital key platform of the terminal system through the key application portal.

[0020] The digital key platform forwards the secondary key issuance application to the primary user device.

[0021] The main user device obtains the declaration information in the secondary key issuance application, and submits the information including the main user's digital signature, master key certificate, etc. to the digital key platform.

[0022] Furthermore, the declaration information provided to the secondary user device includes necessary personal information, authorization information, validity information of the authorization information, and geographic scope information; the necessary personal information includes data that uniquely identifies the subject providing the declaration information; the authorization information is the interaction authority of the secondary user device to the target device.

[0023] Furthermore, the main user's digital signature is specifically as follows: the main user device obtains the declaration information in the secondary key issuance application, and uses the main key certificate to digitally sign the public key and authorization information of the secondary key certificate, the validity period information of the authorization information, and the geographical scope information.

[0024] Furthermore, the chain certificate management system produces a chain certificate including the following steps:

[0025] The chain certificate management system constructs the data to be verified, which includes: the public key and authorization information of the secondary key certificate, the validity period information of the authorization information, and the geographical scope information;

[0026] Then verify the validity of the main user's digital signature based on the data to be verified; if the main user's digital signature is valid, the chain certificate management system fills in the extension items of the chain certificate and then returns it to the digital key issuing agency; the filled extension items include: authorization information of the secondary key issuance application, validity period information of the authorization information, geographical scope information, main user digital signature, and main key certificate.

[0027] Another aspect of the present invention provides a digital key verification method, comprising the following steps:

[0028] The secondary user device initiates a key authentication request to the target device, submitting the secondary key certificate and authentication signature information;

[0029] The authentication signature information is the signature value of the specific data signed with the signature key of the secondary key certificate;

[0030] The target device verifies the secondary key certificate and authentication signature information; when the verification is successful, the target device opens the interaction permission to the secondary user device.

[0031] Furthermore, the secondary key certificate of the target device verification specifically includes:

[0032] When the secondary key certificate meets the following conditions, the target device opens control permissions to the secondary user device:

[0033] The certificate chain and validity period of the secondary key certificate are authentic and valid;

[0034] The certificate chain and validity period of the primary key certificate in the secondary key certificate extension are authentic and valid;

[0035] The primary user's digital signature in the extension item of the secondary key certificate is authentic and valid;

[0036] The current time and the geographical scope information of the target device satisfy the authorization information, validity period information of the authorization information, and geographical scope information in the extension item of the secondary key certificate.

[0037] Furthermore, in order to prevent replay attacks, the specific data signed by the authentication signature information is random each time. The authentication signature information is not any signature on the secondary key certificate, but the specific data is signed with the signature key of the secondary key certificate during the identity authentication session, and the target device verifies the signature to verify that the holder of the secondary key certificate actually has the signature key (only the holder of the secondary key certificate has the signature key).

[0038] Because the secondary key certificate contains both the secondary user's information and the signature information of the digital certificate issuing agency, as well as the primary user's digital signature, it is completely possible to directly verify the authenticity and validity of the secondary key certificate and the validity of the vehicle control information granted or disabled. Therefore, the above method enables the target device to directly verify the content of the secondary key certificate. This is also a major problem that the present invention aims to solve: when the vehicle is offline, reliably verify the validity of a newly issued secondary key and the scope of its control authority over the vehicle.

[0039] In another aspect of the present invention, a digital key issuance and verification system is provided, comprising: a primary user device, a secondary user device, a target device, and a terminal system;

[0040] The primary user device, the secondary user device, and the target device all include a device key calculation and storage security environment;

[0041] The terminal system includes a digital key platform, a digital key issuing authority, and a chain certificate management system;

[0042] The digital key platform is used to receive or forward the secondary key issuance application, construct the secondary key information according to the secondary key issuance application, the primary user's digital signature and the primary key certificate, and apply to the digital key issuing agency for the issuance of the secondary key certificate;

[0043] Digital key issuing authority, used to issue master key certificates and secondary key certificates based on the chain certificates constructed by the chain certificate management system;

[0044] Chain certificate management system, used to construct chain certificates.

[0045] Furthermore, the secondary key certificate includes: necessary personal information in the declared information, authorization information of the secondary key issuance application, validity period information of the authorization information, geographical scope information, the public key of the secondary key certificate, the digital signature of the primary user, the primary key certificate, the digital key issuing agency certificate, and the digital signature of the digital key issuing agency on the secondary key certificate.

[0046] The present invention has the following beneficial effects: Based on the method of the present invention, the vehicle can not only distinguish between the main key from the owner and the secondary key authorized by the owner's main key, but also directly extract the authorization information signed by the owner through the main key from the secondary key.

[0047] Furthermore, when the master key on the vehicle is cancelled, all the secondary keys authorized by the master key will become invalid immediately, thus preventing unauthorized access by the secondary keys that have escaped the network.

[0048] At the same time, the authorization information signed by the master key carried in the secondary key can be used as valid electronic evidence of authorization, which greatly reduces the complexity and difficulty of authorization proof. Because the vehicle does not need to rely on external authentication services when verifying the authenticity and validity of the secondary key, the secondary key can still be used normally when the vehicle is in a situation where there is no network service or the network service is extremely poor (such as underground parking lots, remote areas, tunnels, etc.).

[0049] In this way, the high security of digital car keys can be guaranteed, and the convenience of vehicle borrowing and returning, leasing and recycling, contactless transactions of used cars, and contactless vehicle handover can be greatly increased. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] Figure 1 A digital car key system implemented by the digital certificate authentication mechanism of the prior art.

[0051] Figure 2 This is a flow chart of a method for issuing a digital key according to an embodiment of the present invention.

[0052] Figure 3 Flow chart of a digital key verification method according to an embodiment of the present invention. DETAILED DESCRIPTION

[0053] To facilitate understanding by those skilled in the art, the present invention is further described below in conjunction with embodiments and drawings.

[0054] The digital key issuing authority issues a master key certificate to the master user device;

[0055] The master key is used to digitally sign the specific information in the secondary key issuance request of the secondary user device to obtain the proprietary identification of the master key, and the digital key issuing agency configures the proprietary identification of the master key in the secondary key.

[0056] When the target device verifies the secondary key, the proprietary identifier of the primary key in the secondary key is extracted, and the validity of the proprietary identifier is verified by signature verification and other methods, thereby verifying the validity of the secondary key.

[0057] Since the secondary key certificate already contains the proprietary identifier of the primary key certificate, the target device (such as a vehicle) no longer needs to establish a comparison table between the primary key certificate and the secondary key certificate, but can obtain it directly from the secondary key certificate, which simplifies the complexity of digital key platform management and reduces the operation and maintenance costs of the digital key platform. It can not only avoid comparison table errors caused by untimely information updates, but more importantly, it can use the secondary key offline in the absence of Internet access or in poor Internet access conditions (such as underground parking lots, outdoors, etc.), so that the target device can temporarily transfer the right of use in a safe, compliant, convenient and reliable manner when offline.

[0058] The digital key issuance and verification system of this embodiment includes: a primary user device, a secondary user device, a target device, and a terminal system;

[0059] The primary user device, the secondary user device, and the target device all include a device key calculation and storage security environment;

[0060] The terminal system includes a digital key platform, a digital key issuing authority, and a chain certificate management system;

[0061] The digital key platform is used to receive or forward the secondary key issuance application, construct the secondary key information according to the secondary key issuance application, the primary user's digital signature and the primary key certificate, and apply to the digital key issuing agency for the issuance of the secondary key certificate;

[0062] Digital key issuing agency, used to issue master key certificates and secondary key certificates;

[0063] Chain certificate management system, used to construct chain certificates;

[0064] The secondary key certificate includes: necessary personal information in the declared information, authorization information of the secondary key issuance application, validity period information of the authorization information, geographical scope information, public key of the secondary key certificate, digital signature of the primary user, primary key certificate, certificate of the digital key issuing agency, and digital signature of the digital key issuing agency on the secondary key certificate.

[0065] The digital key issuance and verification system of this embodiment adds a "chain certificate management system". The digital certificate issued for the digital car key includes information such as the authorization and signature of the master key, as shown in the figure below: The chain certificate includes the secondary key certificate, the primary user's digital signature, the primary key certificate, the digital key issuing agency certificate, and also includes the authorization information of the secondary key certificate.

[0066]

[0067]

[0068] For the convenience of description, the above-mentioned certificate containing the master key certificate and the master user's digital signature is called a "chain certificate" to distinguish it from the traditional conventional digital certificate. "Chain certificate" refers to two digital certificates A and B, where the B certificate contains the signature of the A certificate on certain items of the B certificate, indicating the recognition and endorsement of these items of the B certificate by the A certificate. In this way, an endorsement trust chain is also formed between the A certificate and the B certificate. However, the A certificate is not a CA certificate, so it cannot appear in the "certificate chain", but B contains the trust endorsement relationship of A, so the certificate B containing this trust relationship between certificates is called a chain certificate. That is, the "chain certificate" is a digital certificate that contains a personal trust relationship, and maintains the integrity and authority of the certificate chain of the digital certificate itself.

[0069] The method for issuing a digital key in this embodiment is as follows: the steps of the car owner authorizing others (drivers or other service personnel) to use the digital car key are as follows: Figure 2 As shown:

[0070] 1. The primary user device sends a key application entry link to the secondary user device. The application entry link already contains the primary key certificate association information.

[0071] 2. The secondary user device fills in the necessary personal information and authorization requirements on the key application entry interface, and then submits the secondary key issuance application to the digital key platform. Personal necessary information includes name, ID number, email address, mobile phone number, affiliated unit and department, etc. Authorization information is the granting and disabling information of vehicle control permissions, such as the permission to open / close the door, the permission to start / stop the vehicle, the permission to control the steering wheel, the permission to access and delete the driving recorder, etc. When applying for the issuance of a secondary key certificate, the public key and private key required for the certificate will be generated on the secondary user device first; the private key is saved locally; the public key is submitted to the digital key platform along with the certificate application.

[0072] 3. The digital car key platform forwards the secondary key issuance application submitted by the secondary user device to the primary user device, asking the secondary user device to confirm and sign.

[0073] 4. Check the applicant information, authorization requirements, etc. in the secondary key application submitted by the secondary user device, sign to confirm or reject the authorization application to the digital key platform, and submit your own primary key certificate and other information. The primary user device does not sign the "personal necessary information", and the digital certificate issuing agency signs the entire certificate. The primary user only needs to sign the authorization-related information and the public key of the secondary certificate.

[0074] 5. The digital key platform constructs the secondary key information based on the key authorization application confirmed by the main user device, the main key certificate and its signature and other information, and applies to the digital certificate issuing agency for the issuance of a digital key certificate, which must include the authorization signature and other information of the main user device.

[0075] 6. The digital certificate issuing agency verifies the application information for issuing the key digital certificate and requests the chain certificate management system to produce a chain certificate (called a "secondary key certificate") containing the authorization signature information of the primary user device.

[0076] The chain certificate management system extracts the secondary key authority information (including the granting and disabling information of vehicle control authority, such as the authority to open / close the door, the authority to start / stop the vehicle, the authority to control the steering wheel, the authority to access and delete the driving recorder, etc.) from the request, as well as the validity period information of these authorizations and the public key of the secondary key certificate, and together they form the data to be signed, and verify the validity of the signature of the main key certificate on "secondary key authority information, authorization validity period information, authorized geographical scope information, and secondary key certificate public key". If the above signature of the main key certificate is valid, the chain certificate management system fills the secondary key authority information, authorization validity period information, the signature information of the main key certificate on "secondary key authority information, authorization validity period information, authorized geographical scope information, and secondary key certificate public key", and the main key certificate as the extension of the chain certificate, and then returns it to the digital key issuing agency as the secondary key certificate to be signed.

[0077] 7. The digital certificate issuing agency verifies the chain certificate information returned by the chain certificate system, issues a secondary key certificate, and returns it to the digital key platform.

[0078] 8. The digital key platform notifies the secondary user device to download the secondary vehicle key.

[0079] 9. The secondary user device downloads the secondary car key to the local device and can use the secondary car key.

[0080] The digital key verification method of this embodiment, such as the steps of verifying the authenticity and validity of the digital car key (secondary key) held by another person by a vehicle, is as follows: Figure 3 As shown:

[0081] 1. The secondary user device approaches the vehicle, and the vehicle APP in the secondary user device initiates a key authentication request to the target device (vehicle), submitting the secondary key certificate and authentication signature information.

[0082] 2. The vehicle verifies the secondary key certificate submitted by the mobile phone APP, and first verifies the authenticity and validity of the secondary key certificate (certificate chain, validity period, etc.).

[0083] 3. The vehicle re-verifies the authenticity and validity of the master key certificate contained in the secondary key certificate (certificate chain, validity period, etc.), as well as the authenticity and validity of the owner's master key certificate's authorization information for the secondary key and the signature information of the secondary key public key, and verifies whether the current conditions meet the vehicle key usage restrictions (such as usage time range, etc.).

[0084] Among them, "certificate chain" is a basic term for digital certificates, which represents the chain of the final issuing authority CA of a digital certificate and the superior issuing authority CA of the CA (called intermediate CA), up to the root CA. These CAs are all trusted authorities. That is, these CAs in the certificate chain recursively endorse this digital certificate, forming an endorsement chain.

[0085] If the secondary key certificate is authentic and valid, and the owner's main key certificate is authentic and valid, and the owner's main key certificate's authorization information for the secondary key and the signature information of the secondary key public key are also authentic and valid, and the current conditions meet the usage restrictions agreed in the secondary key, the vehicle accepts the secondary key and opens control usage permissions to it.

[0086] The above embodiments are only for illustrating the technical idea of ​​the present invention, and cannot be used to limit the protection scope of the present invention. Any changes made on the basis of the technical solution in accordance with the technical idea proposed by the present invention shall fall within the protection scope of the present invention.

Claims

1. A method for issuing a digital key, characterized in that: The following steps are involved: The digital key issuing agency of the terminal system issues a master key certificate to the master user device; When the primary user device receives the secondary key issuance application, it submits the information including the primary user's digital signature and the primary key certificate to the digital key platform of the terminal system; The digital key platform constructs the secondary key certificate issuance application information based on the secondary key issuance application, the primary user's digital signature and the primary key certificate information, and applies to the digital key issuing institution for the issuance of the secondary key certificate; The main user digital signature is: the main user device obtains the declaration information in the secondary key issuance application, and uses the main key certificate to digitally sign the public key and authorization information, validity period information of the authorization information, and geographical scope information of the secondary key certificate; The digital key issuing agency verifies the secondary key certificate issuance application information and requests the chain certificate management system of the terminal system to produce a chain certificate including the primary user's digital signature information; The digital key issuing agency verifies whether the chain certificate returned by the chain certificate management system is in compliance with the regulations, issues a secondary key digital certificate to the chain certificate that is in compliance with the regulations, and returns it to the digital key platform; The secondary user device obtains the secondary key certificate; The chain certificate management system produces chain certificates including the following steps: The chain certificate management system constructs the data to be verified, which includes: the public key and authorization information of the secondary key certificate, the validity period information of the authorization information, and the geographical scope information; The validity of the main user's digital signature is verified based on the data to be verified; if the main user's digital signature is valid, the chain certificate management system fills in the extension items of the chain certificate and then returns it to the digital key issuing agency; the filled extension items include: authorization information of the secondary key issuance application, validity period information of the authorization information, geographical scope information, main user digital signature, and main key certificate.

2. The method for issuing a digital key according to claim 1, characterized in that: The application for issuing a duplicate key includes: The primary user device transmits a key application entry link to the secondary user device; the key application entry link includes primary key association information of the primary user device; Submitting a secondary key issuance application including declaration information provided to the secondary user device to the digital key platform of the terminal system through the key application portal; The digital key platform forwards the secondary key issuance application to the primary user device; The main user device obtains the declaration information in the secondary key issuance application, and submits the information including the main user's digital signature and the main key certificate to the digital key platform of the terminal system.

3. The method for issuing a digital key according to claim 1 or 2, characterized in that: The declaration information provided to the secondary user device includes necessary personal information, authorization information, validity information of the authorization information, and geographical scope information; the necessary personal information includes data that uniquely identifies the subject providing the declaration information; the authorization information is the interaction authority of the secondary user device to the target device.

4. A digital key verification method, characterized in that: The following steps are involved: The secondary user device initiates a key authentication request to the target device, submitting the secondary key certificate and authentication signature information; The authentication signature information is the signature value of the specific data signed with the signature key of the secondary key certificate; The target device verifies the secondary key certificate and authenticates the signature information; When the verification is successful, the target device opens the interaction permission to the secondary user device. The secondary key certificate verified by the target device includes: When the secondary key certificate meets the following conditions, the target device opens control permissions to the secondary user device: The certificate chain and validity period of the secondary key certificate are authentic and valid; The certificate chain and validity period of the primary key certificate in the secondary key certificate extension are authentic and valid; The main user's digital signature in the extension item of the secondary key certificate is authentic and valid; the main user's digital signature is: the main user's device obtains the declaration information in the secondary key issuance application, and uses the main key certificate to digitally sign the public key and authorization information of the secondary key certificate, the validity period information of the authorization information, and the geographical scope information; The current time and the geographical scope information of the target device satisfy the authorization information, validity period information of the authorization information, and geographical scope information in the extension item of the secondary key certificate.

5. The digital key verification method according to claim 4, characterized in that: The authentication signature information is a signature of specific data signed by the signature key of the secondary key certificate during the identity authentication session; the specific data signed by the authentication signature information each time is random.

6. A digital key issuance and verification system, characterized in that: include: Main user equipment, secondary user equipment, target equipment, terminal system; The primary user device, the secondary user device, and the target device all include a device key calculation and storage security environment; The terminal system includes a digital key platform, a digital key issuing authority, and a chain certificate management system; The digital key platform is used to receive or forward the secondary key issuance application, construct the secondary key information according to the secondary key issuance application, the primary user's digital signature and the primary key certificate information, and apply to the digital key issuing agency for the issuance of the secondary key certificate; The main user digital signature is: the main user device obtains the declaration information in the secondary key issuance application, and uses the main key certificate to digitally sign the public key and authorization information, validity period information of the authorization information, and geographical scope information of the secondary key certificate; Digital key issuing authority, used to issue master key certificates and secondary key certificates based on the chain certificates constructed by the chain certificate management system; Chain certificate management system, used to construct chain certificates; The chain certificate management system produces chain certificates including the following steps: The chain certificate management system constructs the data to be verified, which includes: the public key and authorization information of the secondary key certificate, the validity period information of the authorization information, and the geographical scope information; The validity of the main user's digital signature is verified based on the data to be verified; if the main user's digital signature is valid, the chain certificate management system fills in the extension items of the chain certificate and then returns it to the digital key issuing agency; the filled extension items include: authorization information of the secondary key issuance application, validity period information of the authorization information, geographical scope information, main user digital signature, and main key certificate.

7. The digital key issuance and verification system according to claim 6, characterized in that: The secondary key certificate includes: necessary personal information in the declared information, authorization information of the secondary key issuance application, validity period information of the authorization information, geographical scope information, public key of the secondary key certificate, digital signature of the primary user, primary key certificate, certificate of the digital key issuing agency, and digital signature of the digital key issuing agency on the secondary key certificate.

Images